$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a353030303a3a2f33362d3336203d3e203633383632.roa File: 323430313a663938303a353030303a3a2f33362d3336203d3e203633383632.roa (raw, json) Hash identifier: 4RvKbxqsxmFphFFT0AR0YU3P7kO33nsvJL0cm7fON84= Subject key identifier: EF:1F:D3:D5:CD:94:B7:C8:2A:EE:DB:E2:AF:D9:AB:1E:05:B6:81:96 Certificate issuer: /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Certificate serial: 761A54CFBA5F1051102A8FC052299DF864C427D8 Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a353030303a3a2f33362d3336203d3e203633383632.roa Signing time: Thu 14 Aug 2025 06:00:42 +0000 ROA not before: Thu 14 Aug 2025 05:55:42 +0000 ROA not after: Thu 13 Aug 2026 06:00:42 +0000 asID: 63862 IP address blocks: 2401:f980:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:1a:54:cf:ba:5f:10:51:10:2a:8f:c0:52:29:9d:f8:64:c4:27:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Validity Not Before: Aug 14 05:55:42 2025 GMT Not After : Aug 13 06:00:42 2026 GMT Subject: CN=EF1FD3D5CD94B7C82AEEDBE2AFD9AB1E05B68196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:67:4d:aa:e2:83:3a:cf:56:8b:5b:39:a7:9d: 20:55:1b:49:82:9f:05:6d:53:57:01:03:1c:e9:89: 11:0f:39:5e:e8:03:ee:5e:9c:bb:ec:3a:b3:71:68: 9e:ee:7c:7d:81:78:24:ba:c7:40:03:16:72:84:7c: 57:31:23:2f:7a:e1:02:24:91:34:cf:a5:8f:28:af: 33:ae:01:37:c3:93:38:27:c6:01:e0:b9:3b:55:a1: 81:3b:4a:a6:39:4a:fa:8d:6e:c2:b3:54:09:e5:f1: ec:32:ff:2a:87:5d:4e:82:2a:5e:e2:5a:86:67:65: 69:6c:e8:bd:19:6d:c1:a6:8c:12:71:f3:79:5e:e9: 74:3c:e7:9a:e2:1c:04:47:5c:24:df:3b:8b:1e:0f: b9:3d:8e:8d:62:c5:ca:56:b3:44:fb:eb:5b:9a:c8: a8:44:93:35:d4:51:e3:01:3c:a3:a1:19:b8:ee:b8: d1:65:1f:5d:0a:02:5c:86:6e:da:27:88:02:b1:c2: a7:ad:22:16:64:ab:ac:1f:f4:52:53:58:5f:9c:db: a5:9e:87:ec:13:66:80:9a:04:42:73:1e:0a:01:97: 4c:e2:86:b8:71:a7:3f:7b:e4:35:b7:06:73:f7:17: 81:46:c4:1a:22:8f:10:50:08:b5:1c:cb:b7:bd:ea: 64:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1F:D3:D5:CD:94:B7:C8:2A:EE:DB:E2:AF:D9:AB:1E:05:B6:81:96 X509v3 Authority Key Identifier: keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a353030303a3a2f33362d3336203d3e203633383632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:f980:5000::/36 Signature Algorithm: sha256WithRSAEncryption a4:4e:3f:92:0f:55:7c:17:f7:aa:bc:2e:21:47:73:86:e8:45: 41:6f:89:1e:b6:85:3a:b4:b6:9a:9d:84:90:15:7b:8b:58:bf: 3f:12:43:23:43:ea:49:f6:94:1c:71:90:1b:f2:fd:68:a7:5e: 09:5a:b2:4b:3a:6a:57:56:0d:2b:44:9e:8c:34:e4:d7:35:e3: fa:d0:49:9d:c2:08:8e:9e:90:79:18:26:e9:2d:f4:1f:48:96: d4:90:75:97:0b:a0:17:88:7a:34:64:07:6a:02:be:ef:e0:f1: a2:ce:9d:81:98:2a:9c:28:c8:79:98:c7:91:f8:f5:00:64:62: b7:06:0c:6c:6b:7a:61:9c:38:dd:55:0a:3d:50:ac:f6:81:ad: 4f:ae:52:2e:a3:d6:12:13:04:1a:86:fe:fc:ba:0a:44:9f:e8: 64:9c:36:d9:30:7e:92:c8:a2:64:ef:9a:da:e5:a1:b1:ef:ae: e7:56:8e:6a:a7:35:41:30:3c:37:c0:8a:75:88:c2:01:c1:e8: 01:c0:fd:82:de:ad:e7:52:10:e0:f2:c9:c5:50:ad:15:24:3e: 38:da:cc:30:38:12:60:57:3a:59:74:9f:0f:78:9a:f1:f0:1e: 2e:56:84:72:61:b8:f5:0d:be:de:ef:4f:9c:0b:e9:7f:a2:6f: 0f:a8:39:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdhpUz7pfEFEQKo/AUimd+GTEJ9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFF MDFENjBDOTAeFw0yNTA4MTQwNTU1NDJaFw0yNjA4MTMwNjAwNDJaMDMxMTAvBgNV BAMTKEVGMUZEM0Q1Q0Q5NEI3QzgyQUVFREJFMkFGRDlBQjFFMDVCNjgxOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYZ02q4oM6z1aLWzmnnSBVG0mC nwVtU1cBAxzpiREPOV7oA+5enLvsOrNxaJ7ufH2BeCS6x0ADFnKEfFcxIy964QIk kTTPpY8orzOuATfDkzgnxgHguTtVoYE7SqY5SvqNbsKzVAnl8ewy/yqHXU6CKl7i WoZnZWls6L0ZbcGmjBJx83le6XQ855riHARHXCTfO4seD7k9jo1ixcpWs0T761ua yKhEkzXUUeMBPKOhGbjuuNFlH10KAlyGbtoniAKxwqetIhZkq6wf9FJTWF+c26We h+wTZoCaBEJzHgoBl0zihrhxpz975DW3BnP3F4FGxBoijxBQCLUcy7e96mR5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7x/T1c2Ut8gq7tvir9mrHgW2gZYwHwYDVR0j BBgwFoAUdksj62xj/8qjBfN9vpuQSuAdYMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2U4MzBjOC1kNTU5LTQ1NmEtODgzNS00ZjZlYjU1MjdhYTIvMC83NjRCMjNFQjZD NjNGRkNBQTMwNUYzN0RCRTlCOTA0QUUwMUQ2MEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFFMDFE NjBDOS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4LWQ1NTktNDU2YS04 ODM1LTRmNmViNTUyN2FhMi8wLzMyMzQzMDMxM2E2NjM5MzgzMDNhMzUzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNjMzMzgzNjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAH5 gFAwDQYJKoZIhvcNAQELBQADggEBAKROP5IPVXwX96q8LiFHc4boRUFviR62hTq0 tpqdhJAVe4tYvz8SQyND6kn2lBxxkBvy/WinXglasks6aldWDStEnow05Nc14/rQ SZ3CCI6ekHkYJukt9B9IltSQdZcLoBeIejRkB2oCvu/g8aLOnYGYKpwoyHmYx5H4 9QBkYrcGDGxremGcON1VCj1QrPaBrU+uUi6j1hITBBqG/vy6CkSf6GScNtkwfpLI omTvmtrlobHvrudWjmqnNUEwPDfAinWIwgHB6AHA/YLeredSEODyycVQrRUkPjja zDA4EmBXOll0nw94mvHwHi5WhHJhuPUNvt7vT5wL6X+ibw+oOVQ= -----END CERTIFICATE-----Generated at Sat Aug 23 20:17:35 2025 by rpki-client